The purpose of this document is to provide information regarding the data processing related to the application to an Existing Class of the British-Hungarian English-Hungarian Bilingual Primary School (hereinafter referred to as the „School” or „Data Controller”) on the website britmagyariskola.hu. This document includes the purpose and methods of data processing, as well as the rights of the data subject related to the data processing.
The operator of the website (britmagyariskola.hu) / the data controller:
British-Hungarian English-Hungarian Bilingual Primary School
Representative: the principal of the School, currently Katalin Székelyné Czirják
Headquarters: 1021 Budapest, Tárogató utca 2-4., 2nd floor
OM identification number: 203474
Tax number: 19273204-1-41
Email: admissions@britmagyariskola.hu
The main regulations serving as the basis for data processing:
- Regulation (EU) 2016/679 of the European Parliament and of the Council(April 27, 2016) on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC – GENERAL DATA PROTECTION REGULATION / GDPR
- Act CXII of 2011 on the Right to Informational Self-Determination and Freedom of Information– INFOTV.
The data processing related to the application to an Existing Class of the British-Hungarian English-Hungarian Bilingual Primary School
| List of processed data | Child’s full name, child’s date of birth, name of the child’s current school, child’s proficiency in English, information about any developmental, emotional, behavioral, or health issues of the child, allergies, as well as the name and contact details of a reference person.
Parents’ (father and mother) full names, email addresses, phone numbers. |
| Purpose of data processing | The data is essential for the identification of the parent and the child, furthermore, it serves the purpose of communication between the data controller and the parent, as well as for the evaluation of the application. |
| The legal basis for data processing | The data subject’s consent (GDPR Article 6(1)a)). |
| Duration of data processing | The data will be stored by the data controller for 5 years following the evaluation of the application. |
| Method of data processing | The data processing will be carried out electronically. |
The data controller draws attention to the fact that providing the above data is mandatory for contact, identification, and for the evaluation of the application.
Consent can be withdrawn by sending an email to the electronic address provided above. The withdrawal of consent does not affect the legality of data processing carried out based on consent before the withdrawal.
Please note that when providing the data of third parties (e.g., the name and contact details of the kindergarten teacher, class teacher, or reference person) or the other parent, the parent submitting the application must ensure the legal basis for data transfer (e.g., consent)! We kindly ask parents to always obtain consent for data processing and transfer. The data controller is not responsible for the processing of data that has been transferred unlawfully
Rights of the Data Subject, Enforcement of Rights, and Complaint Handling
The data subject may request in writing (including by email) information from the data controller about what personal data it processes, on what legal basis, for what purpose, and for how long. Additionally, the data subject may request information on to whom, when, on what legal basis, and which personal data has been made accessible or forwarded. The data controller shall fulfill the request within one month at the latest.
If personal data is inaccurate, the data subject may request its correction. If personal data that reflects the truth is available, the data controller shall make the necessary correction. The data controller shall fulfill the request within one month at the latest.
The data subject may request the deletion of their data from the data controller by submitting a written request. The data controller may refuse the request if a legal obligation requires the data controller to continue processing the personal data. However, if there is no such obligation for further processing of the data, the data controller will fulfill the request within one month at the latest.
The data subject may submit a written detailed request, for the data controller to restrict the processing of their personal data. The restriction will remain in place as long as the reason provided by the data subject justifies it. For example, the data subject may request the restriction if they believe their submission was processed unlawfully by the data controller, but it is necessary for the data controller to retain the submission for an authority or court procedure initiated by the data subject. In such cases, the data controller will continue to store the personal data (e.g., the specific submission) until the authority or court inquiry is concluded, after which the data will be deleted.
The data subject may object in writing to the processing of their personal data if the data controller intends to transfer or use the personal data, for example, for purposes such as public surveys or scientific research. Upon receive of the request, the data controller will examine it as quickly as possible, but no later than within one month, and will decide on its legitimacy.
The data controller will inform the requester (the data subject) in writing, as soon as possible but no later than one month from the submission of the request, about the fulfillment of the request or the reasons for its refusal. In the case of refusal, the data controller will also provide the reasons for the rejection, along with information about the available legal remedies. For this process, it is essential that the data subject is identifiable. If the data controller does not have sufficient information to identify the data subject, they may request additional information from the data subject for this purpose.
Anyone who believes that their rights have been violated due to the data controller’s data processing may file a complaint with the court or the Authority (National Authority for Data Protection and Freedom of Information, Headquarters: 1055 Budapest, Falk Miksa Street 9-11; Phone: +36 (1) 391-1400; Fax: +36 (1) 391-1410; Email: ugyfelszolgalat@naih.hu).
The court will handle the case as a priority. The competent court for judicial proceedings is the Fővárosi Törvényszék but the lawsuit can also be initiated at the court that is competent based on the residence of the person initiating the procedure.
Please be informed that the Authority will only investigate complaints if the data subject has first contacted the Data Controller regarding their complaint, and the issue was not resolved.